$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa File: 333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa (raw, json) Hash identifier: Mq7Z9e8XSldvV79AWzOzyEU+p9BFxT1l/SiohJmE17E= Subject key identifier: 42:51:AD:40:49:DA:42:E3:D1:97:33:04:10:69:A8:9C:76:9B:87:F9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584EA44516B9D27F30937E15E070 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 202 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:16:b9:d2:7f:30:93:7e:15:e0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=4750c08b-7a23-4f09-8426-10e73f890438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:79:1a:7b:51:f8:48:89:0e:2c:22:78:91: d4:3b:c8:ea:65:13:ac:e6:b7:a0:96:2c:9d:2d:ce: 43:12:67:52:d7:53:63:ed:f6:b2:f4:74:ad:54:9e: d9:f7:81:cb:28:82:6a:2e:b2:d4:9b:3d:a1:b3:94: 5e:0b:bd:08:9b:f1:37:69:a4:70:72:8a:6c:9c:e9: 70:a1:1d:84:7b:ea:d5:1c:cf:7d:54:1b:17:4a:91: e9:5b:e7:b5:cd:84:fd:3f:d2:b8:f1:71:6c:90:fe: 63:81:ea:2c:2d:ec:12:ea:e1:09:76:26:2f:f4:09: 5b:ce:20:6d:f0:f9:3f:89:15:34:d6:b6:5b:71:65: 38:87:1a:ba:c8:05:46:74:78:3e:83:81:09:7f:97: 1b:44:33:35:c3:b9:9a:3e:a0:87:1a:6f:67:34:68: fd:1d:62:7b:7e:fa:60:ec:ce:e4:52:c8:76:aa:19: b5:f8:94:ae:ca:ce:ac:36:65:a8:f3:23:83:c8:fe: fa:1e:36:9f:dd:84:a0:8c:63:04:4a:91:56:79:ac: 3a:24:2e:42:d1:9e:d3:de:bf:9d:98:7b:f6:c6:03: e6:f2:39:70:1e:14:e6:32:81:fa:e1:03:8a:6f:15: 7b:b6:0d:99:15:9c:9f:b4:cc:1a:02:7c:65:08:99: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:51:AD:40:49:DA:42:E3:D1:97:33:04:10:69:A8:9C:76:9B:87:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f8:8b:1d:ab:45:1b:38:d4:7d:5c:14:67:75:e9:80:8d:6c: fc:02:bc:8b:fb:c1:48:cd:51:a2:49:f1:c8:59:80:f5:da:06: 72:20:01:fc:c2:a6:4f:57:87:ae:e7:9d:a8:04:14:90:6a:97: 85:7e:1e:0c:18:cc:ac:50:c1:9a:04:a8:6f:44:bd:2e:1d:1f: 77:8a:51:84:40:74:74:c2:75:3e:86:63:32:c5:b1:3b:ac:f6: 29:96:37:44:55:6d:6d:5e:69:de:a1:b9:f3:1d:78:03:b2:20: 0a:cc:8a:2c:1a:2d:48:d7:1b:36:6b:45:c0:44:0c:fa:f5:54: 2d:8b:3b:3f:84:c8:e2:b7:2c:1e:b6:be:0b:f8:96:4d:8d:39: 5e:4f:fd:2b:92:e3:df:8d:f7:14:d2:2f:89:34:d1:2c:87:e9: c3:c4:7f:6d:9d:49:94:25:9e:09:73:ee:00:8f:5f:43:d1:1b: e9:a9:bd:91:52:31:60:4c:45:92:b9:54:e4:8c:83:5a:7f:e3: e2:0b:c8:1b:7f:19:80:d9:22:bb:54:20:de:7c:ba:4c:74:60: 9e:29:9e:a9:dd:d1:1b:b8:e9:70:3f:8d:27:dd:59:7b:60:6b: 46:64:a4:f4:6c:d8:ab:ec:0b:f5:d8:be:a8:97:4a:88:d0:d0: 0b:b3:a8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRRa50n8wk34V4HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk NDc1MGMwOGItN2EyMy00ZjA5LTg0MjYtMTBlNzNmODkwNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QV5GntR+EiJDiwieJHUO8jqZROs5regliyd Lc5DEmdS11Nj7fay9HStVJ7Z94HLKIJqLrLUmz2hs5ReC70Im/E3aaRwcopsnOlw oR2Ee+rVHM99VBsXSpHpW+e1zYT9P9K48XFskP5jgeosLewS6uEJdiYv9AlbziBt 8Pk/iRU01rZbcWU4hxq6yAVGdHg+g4EJf5cbRDM1w7maPqCHGm9nNGj9HWJ7fvpg 7M7kUsh2qhm1+JSuys6sNmWo8yODyP76Hjaf3YSgjGMESpFWeaw6JC5C0Z7T3r+d mHv2xgPm8jlwHhTmMoH64QOKbxV7tg2ZFZyftMwaAnxlCJn42QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJRrUBJ2kLj0ZczBBBpqJx2m4f5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzMzMTc0YTUtOWQ0ZS0z ZWRlLWE2NDAtMGFlNzFmNTNlN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA34ix2rRRs41H1cFGd16YCNbPwCvIv7wUjNUaJJ8chZgPXaBnIgAfzC pk9Xh67nnagEFJBql4V+HgwYzKxQwZoEqG9EvS4dH3eKUYRAdHTCdT6GYzLFsTus 9imWN0RVbW1ead6hufMdeAOyIArMiiwaLUjXGzZrRcBEDPr1VC2LOz+EyOK3LB62 vgv4lk2NOV5P/SuS49+N9xTSL4k00SyH6cPEf22dSZQlnglz7gCPX0PRG+mpvZFS MWBMRZK5VOSMg1p/4+ILyBt/GYDZIrtUIN58ukx0YJ4pnqnd0Ru46XA/jSfdWXtg a0ZkpPRs2KvsC/XYvqiXSojQ0AuzqPE= -----END CERTIFICATE-----Generated at Wed Sep 9 03:43:18 2026 by rpki-client